Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: asF5xFh/CsTvIV18Xk4A9L2lXb1q5RAV6xjX13t6if4=
Subject key identifier: 53:3C:31:39:A7:63:CC:83:3F:04:8E:E2:F2:80:25:91:66:C2:C6:C4
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 01A17D738D0CEEC7F0FA61149B03E67264A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 13:01:26 +0000
Manifest this update: Tue 27 Oct 2026 13:01:26 +0000
Manifest next update: Wed 28 Oct 2026 13:01:26 +0000
Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: Z0Fq+CI5dmjtRw6GHkZ8uPal7+Hxgvb47QVBSYpwzYY=)
2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:8d:0c:ee:c7:f0:fa:61:14:9b:03:e6:72:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Oct 27 13:01:26 2026 GMT
Not After : Oct 28 13:01:26 2026 GMT
Subject: CN=533c3139a763cc833f048ee2f280259166c2c6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:e9:4b:b7:e3:92:0d:14:c7:06:15:69:4a:
cc:dd:c1:78:db:b6:fe:da:17:36:d3:b8:b0:53:bb:
a7:f2:41:11:2a:08:89:52:5b:ee:f6:95:35:00:20:
e8:bd:73:f9:76:db:97:72:be:0f:fd:af:f6:f9:69:
43:3c:cd:c1:bd:77:d0:f0:a2:38:fa:b0:c0:6c:1f:
cc:80:a4:ee:af:82:9a:bf:31:6e:4c:2d:53:f2:26:
ab:6f:e0:d4:41:20:44:94:c4:32:84:a7:f1:bf:af:
39:66:7f:fb:a3:0a:af:62:fe:39:a9:3b:51:c5:83:
17:ae:39:67:4f:d8:ee:7c:be:ab:e5:03:df:54:80:
59:81:54:1e:5d:ff:4b:8c:09:36:b2:0d:24:45:32:
3e:d8:e4:d3:54:f0:9d:2e:08:91:37:b7:05:ad:8f:
2c:f7:7b:63:4f:d7:40:03:a9:aa:c0:bd:d0:fd:3a:
0b:8a:e3:44:e3:2d:8a:ff:5d:54:76:1c:28:69:5f:
60:2a:61:e3:f9:95:1b:de:a0:24:c5:b8:b0:e3:11:
22:a2:3a:48:4e:11:76:df:ce:40:f7:0d:f3:86:93:
a1:e9:b5:7b:20:66:5f:4b:bb:ad:f8:6d:e3:36:81:
62:51:1d:d0:ef:a3:5f:37:1e:60:44:31:ab:9d:fa:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3C:31:39:A7:63:CC:83:3F:04:8E:E2:F2:80:25:91:66:C2:C6:C4
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:38:99:df:89:41:46:13:92:67:f3:cb:53:c9:56:d3:1b:a0:
e1:72:bb:29:9c:2c:95:7c:15:49:57:35:02:4d:0c:e1:c7:3a:
dc:5e:85:02:db:d3:4a:84:c5:5d:21:79:31:aa:54:da:50:c2:
0d:11:1e:4e:9f:b4:ef:65:45:9c:61:47:c2:ca:ca:ac:72:21:
e1:2b:40:99:7a:ce:bf:9a:43:9d:b4:dd:c3:c4:79:5a:51:d1:
a3:69:42:04:0b:db:16:15:65:b2:00:2c:80:b1:5a:25:fc:ab:
00:2f:78:23:cb:29:fe:e1:ea:9a:d7:e0:9c:64:63:d0:cf:a8:
87:b8:a3:c7:0b:3d:a6:5e:ae:82:1d:c8:94:cd:82:d2:e4:33:
70:07:92:bb:fd:e6:c6:77:bb:33:5f:46:93:10:85:df:3e:d2:
3b:50:80:d3:ed:f8:5b:d2:36:73:c6:75:da:ba:68:7f:d4:09:
12:68:41:dd:90:9d:5a:a9:a5:4b:cb:fa:02:45:53:68:91:f7:
a9:d7:d8:a8:34:5c:68:03:93:c4:a0:19:de:9d:d6:4a:91:e9:
03:0c:b3:22:e6:69:cf:49:70:ce:f5:e6:a4:bf:1c:02:b7:e7:
37:76:ae:38:0d:38:41:19:c0:f4:3a:5c:98:0c:9e:ca:c1:de:
be:dc:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:07 2026 by rpki-client